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» The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

Responsive to communication(s) filed on 23 January 2008 . 
2a)D This action is FINAL. 2b)S This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) IEI Claim(s) 1-28 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) E3 Claim(s) 1-28 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) Q Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

1 2) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2.Q Certified copies of the priority documents have been received in Application No. s _. 

3-D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attach ment(s) 

1) ^ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Pa Per No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO/SB/08) 5) □ Notice of Informal Patent Application 

Paper No(s)/Mail Date . 6) □ Other: . 
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Response to Arguments 

Applicant's arguments, see pages 7-9, filed 1/23/2008, with respect to the rejection(s) of claim(s) 1- 
27 under 35 USC § 102 & 35 USC § 103 have been fully considered and are persuasive. Therefore, 
the rejection has been withdrawn. However, upon further consideration, a new ground(s) of 
rejection is made in view of US Patent 6950862 to Puthiyandyil et al. (hereinafter Puthiyandyil). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness rejections 

set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 102 
of this title, if the differences between the subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill in the art 
to which said subject matter pertains. Patentability shall not be negatived by the manner in which the invention was 
made. 

Claims 1-2, 7-9, 24-26 are rejected under 35 U.S.C. 102(b) as being anticipated by RFC 3244- 
Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols by Swift et 
al. (hereinafter Swift) in view of US Patent 6950862 to Puthiyandyil et al. (Puthiyandyil). 

Regarding Claim 1, Swift discloses the receiving a encryption algorithm request wherein the request 
specifies an encryption algorithm for subsequent communications between client and server see 
Page 2 "Request Message" protocol version number; sending a subsession key to the client, wherein 
the subsession key may be used in conjunction with encryption algorithm to encrypt future messages 
see Page 3 " Reply Message" AP-REP data. But Swift does not explicitly disclose the negotiating of 
encryption algorithms. However, Puthiyandyil discloses the negotiating of encryption schemes see 
Fig. 9 item 908. It would be obvious to one having ordinary skill in the art at the time of the 
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invention to include the negotiating encryption schemes in the invention of Swift in order to take 
into account for the speed, cost, memory considerations see Puthiyandil see Col 9 Ln 51-53. 

Regarding Claim 2, Swift discloses the sending and receiving as part of a authentication protocol see 
Page 3 Par. 1. 

Regarding Claim 7, Swift discloses the deriving of algorithm from key see Page 3 Par. 2 "The 
newpasswd . ..". 

Regarding Claim 8, Swift disclose sending an encryption algorithm request to server indicating that a 
client computer supports a specified encryption algorithms see Page 4 

cc KRB5_KPASSWD_BAD_VERSION"; anticipating a subsession key with encryption algorithms 
see Page 2 "Request Message"; switching to specified algorithm if the subsession key is delivered see 
Page 3 "AP-REP data" & Page 2 "AP-REQ data". 

Regarding Claim 9, Swift discloses the authenticating a server computer see Page 2 "KRB_PRIV 
message". 

Regarding Claim 24, Swift discloses the receiving a encryption algorithm request wherein the request 
specifies an encryption algorithm for subsequent communications between client and server see 
Page 2 "Request Message" protocol version number and sending and receiving as part of a 
authentication protocol see Page 3 Par. 1; the switching to specified algorithm if the subsession key 
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is delivered see Page 3 "AP-REP data" & Page 2 "AP-REQ data. But Swift does not explicidy 
disclose the negotiating of encryption algorithms. However, Puthiyandyil discloses the negotiating of 
encryption schemes see Fig. 9 item 908. It would be obvious to one having ordinary skill in the art at 
the time of the invention to include the negotiating encryption schemes in the invention of Swift in 
order to take into account for the speed, cost, memory considerations see Puthiyandil see Col 9 Ln 
51-53. 

Regarding Claim 25-26, Swift discloses the encrypting of AP-REQ using an algorithm see Page 3 
Par. 1. 

Claims 3-6,10-13, 15-18 , 21-23, 27-28 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over RFC 3244-Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols 
by Swift et al (hereinafter Swift) in view of rpcsec_gss, kadmin service principal, etc by Coffman, 
Kevin further in view of US Patent 6950862 to Puthiyandyil et al. (Puthiyandyil). 

Regarding Claim 3, 10, 23, 27, Swift does not disclose the gss interface for authentication protocol. 
However, Coffman discloses the gss interface for authentication protocol see Page 1 Par. 3 "The 
kpasswd. . .". It would be obvious to one having ordinary skill in the art at the time of the invention 
to include the GSSAPI in the invention of Swift in order to include the protocol in a package or 
suite akin to RPC. 



Regarding Claim 4, 11, Swift discloses the AP-REQ see Page 2- The Protocol Par. 1. 
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Regarding Claim 5-6, 12-13, 22, Swift discloses the encrypting of AP-REQ using an algorithm see 
Page 3 Par. 1. 

Regarding Claim 15, Swift discloses the receiving a encryption algorithm request wherein the 
request specifies an encryption algorithm for subsequent communications between client and server 
see Page 2 "Request Message" protocol version number;- the authenticating a server computer see 
Page 2 "KRB_PRIV message"; client computer supports a specified encryption algorithms see Page 
4 "KRB5 J<PASSWD_BAD_VERSION". Swift does not disclose the gss interface for 
authentication protocol. However, Coffman discloses the gss interface for authentication protocol 
see Page 1 Par. 3 "The kpasswd. . It would be obvious to one having ordinary skill in the art at the 
time of the invention to include the GSSAPI in the invention of Swift in order to include the 
protocol in a package or suite akin to RPC. But Swift does not explicitly disclose the negotiating of 
encryption algorithms. However, Puthiyandyil discloses the negotiating of encryption schemes see 
Fig. 9 item 908. It would be obvious to one having ordinary skill in the art at the time of the 
invention to include the negotiating encryption schemes in the invention of Swift in order to take 
into account for the speed, cost, memory considerations see Puthiyandil see Col 9 Ln 51-53. 

Regarding Claim 16-17, Swift discloses the deriving of algorithm from key see Page 3 Par. 2 "The 
newpasswd . . .". 

Regarding Claim 18, Swift discloses the switching to specified algorithm if the subsession key is 
delivered see Page 3 "AP-REP data" & Page 2 "AP-REQ data". 
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Regarding Claim 21, Swift discloses the sending and receiving as part of a authentication protocol 
see Page 3 Par. 1 . 

Regarding Claim 28, Swift discloses the flag in a checksum see Page 2 KRB-PRIV. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the examiner should be 
directed to Venkat Perungavoor whose telephone number is 571-272-7213. The examiner can 
normally be reached on 8:30-5:00. If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone 
number for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be 
obtained from either Private PAIR or Public PAIR. Status information for unpublished applications 
is available through Private PAIR only. For more information about the PAIR system, see 
http://pair-directuspto.gov. Should you have questions on access to the Private PAIR system, 
contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like 
assistance from a USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/VP/ 
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